turbot / steampipe-mod-github-compliance

Run individual controls or full compliance benchmarks for across all of your GitHub resources using Powerpipe and Steampipe.
https://hub.powerpipe.io/mods/turbot/github_compliance
Apache License 2.0
8 stars 1 forks source link

error when querying collaborators in a repo where I lack push access #10

Closed judell closed 1 year ago

judell commented 2 years ago

For example, I belong to the hypothesis org but lack push access to some (maybe now all) repos there. Such access is required into order to query for collaborators.

 steampipe check control.cis_supply_chain_v100_1_2_3

+ 1.2.3 Ensure repository deletion is limited to specific users ..................................................................................................................... 1 / 1 [==========]

  ERROR: GET https://api.github.com/repos/hypothesis/checkmatelib/collaborators?affiliation=all&per_page=100: 403 Must have push access to view repository collaborators. [] (SQLSTATE HV000)

One workaround: use a repo_pattern (https://github.com/turbot/steampipe-mod-github-compliance/tree/use-repo-pattern) to avoid my hypothesis repos.

rajlearner17 commented 2 years ago

@judell Thank you for the modelled branch and your valuable suggestion.

We are aware of the throttling issue in GitHub, which persists in sherlock as well.

For the time being, I will raise draft PR from your branch as an example and reach out internally for a discussion; in case the recommended changes can be applied across all repo queries with any other applicable changes.

github-actions[bot] commented 1 year ago

'This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 30 days.'

github-actions[bot] commented 1 year ago

'This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 30 days.'

github-actions[bot] commented 1 year ago

'This issue was closed because it has been stalled for 90 days with no activity.'